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ABSTRACT 

This  paper  will  address  the  results  of  a  recent  study  developing  model  based  techniques  using 
analytical  redundancy  in  the  production  of  observation  residuals  that  are  processed  for  the  on-line,  real  time 
detection  of  dynamic  faults  during  the  operation  of  AUVs.  AUVs  are  being  developed  for  oceanographic 
survey,  as  well  as  military,  missions.  Now  that  underwater  navigation  to  sufficient  precision  within  cost 
limits  is  possible,  the  remaining  technical  issue  is  to  improve  the  reliability  of  the  mission  completion. 
Increasing  mission  reliability  implies  many  things-some  having  nothing  to  do  with  automatic  fault 
detection.  However,  assuming  that  the  vehicle  is  equipped  with  highly  reliable  sensor  suites,  connections, 
and  computing  components,  it  is  of  interest  to  see  if  unexpected  faults  could  be  detected  reliably  so  that 
system  reconfiguration  could  be  accomplished  to  allow  missions  to  be  continued  in  some  fashion. 

A  survey  of  fault  detection  methods  indicates  that  alarms  can  be  easily  monitored  if  signals  are 
static.  This  is  done  using  ‘limits  and  trends’  analysis  with  thresholds  set  for  various  levels  of  severity.  With 
dynamic  signals,  such  as  those  induced  by  an  actuator  fault  in  the  form  of  a  stuck  fin,  or  a  loose  fin,  or 
fouling  of  a  propeller,  the  transient  nature  of  the  signal  makes  limits  and  trends  analysis  invalid.  In  these 
cases,  signals  are  sought  that  include  servo  error,  and  the  residual  error  in  observation  filters.  Designing 
observation  filters  builds  analytical  redundancy  into  the  decision  making.  Additionally,  since  there  is 
always  the  difficulty  of  separating  the  fault  response  from  disturbance  response,  operation  near  the  surface 
under  waves  requires  the  development  of  a  wave  detector. 

A  fault  detection  architecture  is  proposed  that  is  based  on  using  simple  detection  circuits  that  look 
for  fault  signal  magnitude  as  well  as  length  of  time  persisting  in  the  fault  mode  that  produces  the  fault 
declaration.  Adjustments  in  the  threshold  parameters  are  able  to  distinguish  between  wave  disturbance  and 
fault  condition. 

The  architecture  allows  for  the  recommended  accommodation  response  using  a  fuzzy  inference 
system  linking  residual  fault  declaration  signals  as  inputs  that  are  mapped  to  recommended  actions  using 
fuzzy  rules. 

Example  responses  are  discussed,  and  in  particular,  the  fault  detection  and  accommodation  due  to 
loss  of  control  at  low  speed  under  wave  action  with  stuck  fins,  is  given. 

INTRODUCTION 

Long  term  deployments  of  autonomous  systems  in  the  ocean  require  replenishment  of  energy 
supplies  and  reliable,  fault  free  operation.  It  is  recognized  that  fault  free  operation  will  not  always  be 
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possible,  so  that  system  design  must  pay  attention  to  a  study  of  failure  modes  and  their  effects.  In  spite  of 
the  use  of  good  engineering  practice,  faults  can  occur.  Two  kinds  of  ‘faults'  identified  are, 


1 )  those  that  arise  from  malfunctions  in  the  hardware  and  software  subsystems  in  the  vehicle, 

2)  those  that  arise  from  environmental  conditions  that  are  viewed  as  disturbances,  and  while  these 

may  not  be  directly  ‘faults’,  they  have  the  effect  that  the  completion  of  a  mission  is  jeopardized. 

An  example  of  a  hardware  fault  would  be  the  loss  of  steering  resulting  from  a  stuck  or  loose  fin. 
An  example  of  a  type  2  fault  would  the  inability  of  the  vehicle  to  take  a  data  measurement  because  of  high 
sea  state  in  shallow  water  operation. 

To  design  a  system  that  will  automatically  detect  the  presence  of  a  ‘fault’  is  the  subject  of  many 
papers.  This  problem  is  common  to  the  aircraft,  spacecraft,  and  process  industries,  and  much  has  been 
written  about  methods  available.  In  general  we  can  classify  the  methods  into  those  that  use  simple  limits 
and  trends  analysis,  those  that  use  detection  techniques  but  which  are  without  the  use  of  analytical  models, 
and  those  that  provide  analytical  models  as  the  basis  for  detection  filters  [1,2].  The  detection  of  status 
signals  such  as  battery  voltage,  motor  winding  temperature,  computer  bay  temperatures,  is  relatively  easy 
and  accomplished  by  the  comparison  of  the  measured  signal  with  a  previously  set  threshold.  Exceeding 
those  thresholds  would  indicates  a  fault  condition  for  which  some  action  is  taken  -  for  instance  either  to 
slow  down  the  vehicle  speed  or  to  abort  the  mission  and  surface.  It  is  more  difficult  is  to  detect  those  faults 
that  give  rise  to  dynamic  signals  such  as  sudden  changes  in  pitch  rate  that  are  caused  by  actuator  faults 
where  some  form  of  model  free,  or  model  based  residual  generation  must  be  included. 


Model  Free  Detection 

Threshold  detection  is  appropriate  when  the  signals  are  static  or  slowly  varying  and  such  that  a 
single  excedence  means  that  a  fault  will  be  persistent  for  the  remainder  of  the  voyage.  Such  methods  are 
not  suitable  for  dynamic  signals  that  could  arise  for  instance  from  seaway  wave  action.  The  propensity  of 
dynamic  signals  to  exceed  a  threshold  but  later  to  come  within  bounds  causes  thresholding  alone  to  be  a 
problem.  We  resort  to  model  free  methods  where  some  constant  feature  of  the  signal  can  be  extracted  and 
then  that  feature  is  compared  against  the  threshold.  Such  is  the  case  when  a  spectral  analysis  is  performed 
on  signals  and  spectral  levels  in  specified  frequency  bands  can  be  compared  against  thresholds.  This 
methodology  is  useful  to  detect  the  presence  of  frequency  components  in  servo  error  signals  caused  by 
wave  motion  and  could  be  used  to  identify  levels  of  seaway  induced  disturbances  considered  as  ‘faults' . 


Model  Based  Detection 

The  overall  problem  of  AUV  fault  detection  is  complex.  Handling  complexity  by  decomposition, 
the  author  recommends  limiting  the  detection  of  faults  to  the  primary  subsystems  in  the  vehicle,  including, 
the  speed  control,  steering,  diving,  roll  control,  navigation,  powering,  and  computer  subsystems.  As  far  as 
motion  capabilities  are  concerned  the  speed,  steering  ,  diving,  and  (if  present)  active  roll  control 
subsystems  should  be  monitored.  Faults  that  impair  the  capability  of  these  subsystems  need  to  be  detected 
so  that  control  reconfiguration  may  help  to  mitigate  an  unnecessary  mission  abort.  Some  graceful 
degradation  of  mission  could  be  continued  if  partial  depth  control  or  sped  control  could  be  maintained. 

Dynamic  signals  such  as  those  developed  by  autopilot  errors  become  hard  to  detect,  as  errors  are 
naturally  large  when  steering  to  new  commands,  yet  are  small  if  correct  final  heading  is  maintained.  Wave 
motion  causes  wave  period  oscillatory  motion  in  servo  errors.  Model  based  methods  have  been  found  to  be 
useful  in  detecting  dynamic  faults.  A  model-based  observer  is  used  to  generate  a  ‘residual'  between  the 
sensor  measured  values  and  that  predicted  from  the  model.  Faults  can  arise  from  a  bad  sensor  as  well  as  a 
faulty  actuator  (fin  /  propeller). 


The  residual  provides  a  signal  that  is  not  sensitive  to  servo  errors  caused  by  command  changes,  and 
responds  primarily  to  non  ideal  loads,  disturbances  from  waves,  and  sensor  signal  errors.  Analysis  of  the 
residuals  provides  the  key  to  subsystem  failures.  The  diving  subsystem  of  an  AUV  is  analyzed  for  example. 


The  diving  sub-system  dynamics  for  an  AUV  may  be  modeled  by  the  system  [3,4,  5  ]. 

x'(  t  )  =  [wr(  t  ),q(  t  ),9(  t  ),Z(  t  )];u(  t  )  =  8 s(t)  with 
x(  t  )  =  Ax(  t  )  +  Bu(  t  )+Efa(  t  )  +  Fd(  t  ); 
y(t)  =  Cx(t)+  fs(t) 

With  a  high  quality  inertial  system,  all  state  variables  are  measured  with  little  noise  and  the  output 
matrix,  C,  may  considered  to  be  identity.  fa(t),  fjt)  are  considered  to  be  added  forces  caused  by  fin 

faults,  and  sensor  errors  respectively.  In  the  above,  wr,  q,  9,  and  Z  are  the  heave  velocity  of  the  vehicle 
relative  to  the  water,  the  pitch  rate,  pitch  angle,  and  the  depth.  B  and  E  are  the  input  vectors  for  the  control 
planes  and  added  forces  and  moments  caused  by  imbalance  of  commanded  and  actual  loads  on  the  vehicle, 
caused  by  actuator  faults  and  F  is  the  input  vector  associated  with  disturbances  from  waves  and  upwelling 
current.  It  is  important  to  note  that  since  the  relative  velocity  definition  for  vehicle  states  is  used,  E  and  F 
are  distinct  and  disturbances  from  waves  and  currents  can  be  distinguished  from  actuator  faults. 


A  model-based  observer  is  used  given  by 


x'(t  )  =  [wr(  t  ),q(  t  ),9(  t  ),Z(  t  )];u(  t )  =  8 s(t)  with 
i(t)  =  (  A-KC  )x(t)+Bu(t)+Ky(t); 
v(t)  =  y(  t)—Cx(  t); 

The  residuals,  v(t),  are  the  differences  between  the  measured  states  and  the  estimates  from  the 
observer.  It  follows  that,  the  state  observation  error,  8  x  is  given  by, 

£x(t)  =  (A-KC)£x(t)+Efa(t)  +  Fd(t)  +  Kfs(t); 
v(t  )  =  Cex(t  )+fs(t) 

Unlike  state  observation,  residual  generation  requires  a  different  balance  in  the  choice  of  filter 
gains,  K.  Too  high  a  choice  leads  to  the  residual  being  small,  dominated  by  sensor  faults  and  noise.  A 
lower  gain  set  is  needed  consistent  with  bandwith  requirements.  Of  course,  stability  must  be  obtained. 

The  residuals  can  be  analyzed  in  the  frequency  domain  by, 

v(t  )  =  C( si  -Ac  )~lEfJs)+C(sI-Ac  )~lFd(  s  )  +  C(  si  -  Ac  )~lKfs(s); 

Ac  =  (  A- KC  ) 

One  observer  design  (low  gain)  should  therefore  find  a  gain  set  that  maximizes  the  influence  of 
actuator  faults,  minimizes  the  influence  of  wave  disturbance,  and  the  sensor  faults,  while  a  second  (high 
gain)  observer  could  be  designed  to  emphasis  sensor  faults.  It  is  noted  that  since  the  direction  of  E 
i=-  direction  of  F  ( E ,  F  are  orthogonal),  separation  of  wave  effects  and  actuator  faults  is  possible.  In  fact, 
designing  a  weight  matrix,  W,  for  the  residual  detecting  actuator  faults,  the  ratio, 

I WC(sI-Ac  y1  e\\AwC(sI-Ac  rM,' 


should  be  maximized  over  the  frequency  ranges  appropriate.  A  method  for  the  maximal  decoupling  of 
disturbances  from  faults  using  eigenvector  assignments  is  discussed  in  [6]. 


SIMULATION  RESULTS 

Using  a  model  of  the  US  Navy  DSRV  vehicle  [6],  running  at  a  forward  speed  of  6  ft/sec., 
x'  =  [  wr ,  q,Q ,  Z]  .  For  a  slow  forward  speed  of  6  feet  per  second,  the  dynamics  and  input  matrices  are. 
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In  this  example,  the  vehicle  is  in  forward  way  with  a  command  to  dive.  The  autopilot  for  depth 
control  may  be  designed  a  number  of  different  ways,  but  here,  a  sliding  mode  design  is  used  which  yields 
the  control  law, 


delta=-k*x-0.4*sign(inv((s'*B)))*tanh((sig/phi)); 
if  abs(delta)>.4; 

delta=0.4*  sign(  delta) ; 
end; 

The  placed  poles  are  selected  to  include  a  single  pole  at  the  origin  (required  by  the  method)  giving, 

X=[  -0.4,  -0.41,-0.42,0] 

£=[-0.1435  0.1310  -0.6953  0] 

5 ’=[0.0642  -0.6700  -0.7393  0.0201] 

The  observer  gains  are  found  using  the  Matlab  place  algorithm  to  get  put  the  observer  poles  at  real 
values  close  to  the  control  poles,  at  [-0.5,  -0.56,-0.53,-0.44].  The  solution  for  A  yields. 
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and  the  fault  input  matrix  is  in  the  same  direction  as  the  input  matrix,  B,  E=B ,  while  the  disturbance  from 
wave  velocities  appears  as  an  additive  input  to  the  last  of  the  state  equations,  so  that  F=[0;0;0;1],  A  quick 
check  shows  that  perfect  disturbance  decoupling  has  been  achieved. 

At  a  time  given  by  t=10  seconds,  an  added  fault  at  the  stern  plane  is  inserted,  on  the  top  of  a 
sinusoidal  wave  disturbance  which  persists  from  the  start,  t=0.  The  weighting  matrix,  W  =  I  produces  the 
following  residual  responses  as  shown  in  Figure  1 . 


Depth  Changing  Control  Response  With  Actuator  Fault  at  10  sec. 'Control  Command  in  Rad 


Figure  1.  Fault  Detection  Decoupled  Residuals  For  Each  Diving  State  Vs  Time. 

Figure  1  shows  that  the  heave  velocity  residual  is  highly  responsive  to  the  imposed  actuator  fault 
and  will  easily  detect  the  fault  when  compared  against  a  threshold.  It  appears  that  heave  relative  velocity  is 
insensitive  to  wave  motions  which  appear  strongly  in  the  depth  residual  response.  In  contrast,  the  wave 
disturbance  is  detected  by  the  depth  residual  without  influence  from  the  actuator  fault. 

Detecting  faults  and  isolating  their  origins  is  the  subject  of  robust  residual  generator  design  and 
this  observer  with  a  relatively  slow  bandwidth  illustrates  that  some  isolation  is  possible.  However, 
robustness  is  improved  when  residuals  from  a  variety  of  different  sources  are  compared.  For  instance,  the 
fin  activation  levels,  the  levels  of  servo  errors,  and  the  observer-based  residuals  are  all  useful  in  the  final 
determination  of  faults.  The  combination  of  all  sources  of  information  is  illustrated  with  the  fault  detection 
architecture  illustrated  in  Figure  2. 
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Figure  2  Fault  Detection  Architecture  Including  Fuzzy  Inference  System  for  Resolution  of  Fault  State 


CONCLUSION 


The  paper  has  demonstrated  that  actuator  faults  can  be  detected  in  the  presence  of  wave  induced 
disturbances.  However,  because  of  the  complexity  of  the  environmental  disturbances  and  the  variety  of 
possible  faults,  a  more  comprehensive  detection  system  is  being  proposed  that  includes  assessment  of 
actuator  levels,  servo  error  levels,  and  observer  based  residuals  to  make  the  overall  determination  of  sub 
system  health  for  AUVs. 
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